CVS: cvs.openbsd.org: src
Damien Miller <[email protected]> Wed, 29 Jul 2026 21:37:39 -0600 (MDT)
| Newsgroups | gmane.os.openbsd.cvs |
|---|---|
| Message-ID | <[email protected]> |
CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/29 21:37:39 Modified files: usr.bin/ssh : auth2-hostbased.c auth2-pubkey.c Log message: Move check of public key type against allowed algorithms to before parsing of the key sent by the peer. This removes at least some key parsing and verification paths from the pre-auth attack surface. Suggested by Christopher Paul Rohlf of Anthropic, ok deraadt@